get_current_user rather than requiring username